database-optimizer

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided database schemas, goals, and constraints. This represents a potential attack surface where untrusted data enters the agent context.
  • Ingestion points: Processes user inputs regarding database goals and performance constraints in SKILL.md.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the processing logic.
  • Capability inventory: The skill contains no executable code, shell command invocations, or network access tools.
  • Sanitization: No explicit sanitization or validation of the input content is described.
  • [SAFE]: The skill's functionality is limited to natural language guidance and architecture design recommendations. It references a local file resources/implementation-playbook.md for extended documentation, which is a standard practice for knowledge-based skills.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 09:23 AM
Security Audit — agent-trust-hub — database-optimizer